Last updated: April 2026
Gexiro Global Enterprises Ltd, registered in Gibraltar.
VinFlash processes the minimum data required to deliver our service:
VIN Numbers: Submitted by you for vehicle verification. Processed in real-time and not stored after the request is completed.
Payment Data: Processed entirely by Stripe. We do not store credit card numbers or payment credentials.
Technical Data: IP address (for rate limiting and abuse prevention), browser type, and request timestamps. Retained for up to 30 days.
We do not use cookies for tracking. We do not create user accounts for basic services. We do not collect names, email addresses, or phone numbers unless you contact us directly. We do not sell or share personal data with third parties for marketing.
Stripe: Payment processing. Subject to Stripe\u2019s privacy policy.
Cloudflare: CDN and DDoS protection. Subject to Cloudflare\u2019s privacy policy.
Vehicle Data Providers: We query government and commercial vehicle databases using only the VIN number you submit.
Under GDPR and Gibraltar data protection law, you have the right to access, rectify, erase, and port your personal data. To exercise these rights, please use the contact form on our website.
VIN queries: not retained after processing. Technical logs: 30 days. Payment records: as required by Gibraltar financial regulations.
We may update this policy. Material changes will be noted on this page with the updated date.